Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          id01ZyBD3mtf9VY6e2Uyjp0ucIwdp9og4S7cRFVs/eY=
Subject key identifier:   33:1C:FF:D8:0A:DE:2C:79:44:BE:D5:A2:63:74:47:88:10:02:02:A9
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       018FB30F3941EC62CF0AA4803312F2F61D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          118F
Signing time:             Sun 26 May 2024 04:01:10 +0000
Manifest this update:     Sun 26 May 2024 04:01:10 +0000
Manifest next update:     Mon 27 May 2024 04:01:10 +0000
Files and hashes:         1: TtqPAQL8diNk57Yq0YS4dWolVxc.roa (hash: hyT/dSsNXH1YYxYPe1clQR9INrFEb97EIe7wb0cvXxE=)
                          2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: JVcEVWMKA4878V/PqnMyh8WvhEMpyyKjB05fXRNOw2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:0f:39:41:ec:62:cf:0a:a4:80:33:12:f2:f6:1d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: May 26 04:01:10 2024 GMT
            Not After : May 27 04:01:10 2024 GMT
        Subject: CN=331cffd80ade2c7944bed5a263744788100202a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:4d:72:60:bc:f8:66:99:c5:6d:bc:02:80:
                    07:7d:b4:97:57:de:02:4b:83:75:d7:63:10:f6:e4:
                    51:2f:87:38:b9:47:cd:85:92:a5:e9:84:9b:1b:94:
                    07:57:1b:27:a8:37:cc:40:65:74:4f:4a:5f:d4:e7:
                    72:c6:69:28:8f:67:cc:cb:8b:6c:51:c2:5b:94:1f:
                    26:91:5b:46:dc:bb:c3:de:88:48:27:19:5f:ab:2a:
                    76:ff:0e:d4:3b:e0:87:28:d6:1d:85:81:a2:65:72:
                    eb:d8:f1:fd:c5:1e:e8:c5:94:3e:50:56:3e:c7:30:
                    c4:2c:57:ff:2a:c1:e2:03:a0:95:d8:7c:fa:33:88:
                    a3:c6:dc:73:c0:99:a5:7b:71:11:42:34:9a:14:cd:
                    7a:b1:a8:bd:ae:8b:25:95:c2:87:b3:2c:53:a2:95:
                    7c:62:b6:b9:b8:76:46:ed:b6:f8:64:ce:b2:08:24:
                    01:68:fb:ef:e0:1e:a4:d9:09:7f:3b:81:49:f6:d9:
                    81:e2:cc:93:2b:46:f5:08:a4:00:b5:2a:74:5a:9d:
                    71:80:3c:2e:88:0b:81:d1:82:93:8d:64:6b:bb:90:
                    4a:57:9a:d2:11:54:17:4b:20:f4:50:e7:a9:bc:cd:
                    91:dc:48:86:c5:bd:d4:61:ae:8f:50:1e:c0:01:f8:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:FF:D8:0A:DE:2C:79:44:BE:D5:A2:63:74:47:88:10:02:02:A9
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:62:43:d0:f2:89:ee:67:b0:72:3f:5f:e3:3f:df:08:d8:
         ee:19:f9:f8:f5:f2:d9:38:33:64:c8:b5:2a:d5:31:ac:fe:25:
         dc:4c:a8:c2:32:49:53:a4:5f:b3:62:38:b0:c1:f0:ba:97:22:
         d1:46:ef:46:88:9e:46:76:23:50:24:7c:0a:fd:a1:76:08:ed:
         9a:1f:b6:1b:6f:eb:1a:e2:8e:a4:c1:15:f6:5b:77:dc:b3:fe:
         35:fb:4d:42:05:20:da:43:be:81:2c:52:a2:a3:8a:b4:8b:c2:
         f7:2b:15:6e:b3:14:4d:ac:f8:2f:53:50:60:85:8c:96:84:f2:
         57:0f:bc:3a:62:b5:12:60:7c:1f:ef:72:e8:be:bf:fc:4c:2d:
         88:57:8e:b2:b7:a9:73:f6:52:5a:84:a9:5d:7f:76:80:63:63:
         a7:63:83:e5:ef:71:2c:7c:78:80:f2:a4:cd:4b:a3:4a:50:7b:
         66:31:83:70:ad:ab:6b:e1:d7:3f:53:4b:bd:b0:77:27:8c:0d:
         f5:05:96:30:97:a8:6c:de:38:b5:7d:c5:4e:7e:ce:2e:bd:12:
         f5:39:af:10:d4:e5:94:c2:c9:18:ad:c2:20:fb:00:4f:10:4a:
         b3:c9:00:a7:1c:cc:22:17:ab:ff:d4:8f:fc:f7:6b:80:68:86:
         91:ae:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:43:15 2024 by rpki-client on console-ams.rpki-client.org